Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier: l8lsN2At19T7Y13Re8kNPK4cFFH/MbLdRiNsjKevk5Q=
Subject key identifier: 02:28:2A:29:6C:90:AD:58:8A:78:9F:68:F7:9D:A6:2C:D8:AA:CD:7F
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 01993FF268385912F2F497DAFDE287506D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number: 136E
Signing time: Fri 12 Sep 2025 22:01:14 +0000
Manifest this update: Fri 12 Sep 2025 22:01:14 +0000
Manifest next update: Sat 13 Sep 2025 22:01:14 +0000
Files and hashes: 1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: Jlg9ERfMLQD7FUH1Y8merikqiJF8HGt1cPZSwFJ9Uqs=)
2: GpM90An4j0aWnAQVOPwoRVNatnk.roa (hash: MKIleZe0XP5Hk0DTuIZD6iDzaTxtrUWEQu34eF8ZBrE=)
3: QRwZwj-EtgWsWtGLyP94z8eYhbY.roa (hash: XsWkHritSLVCWhTRPolIJOQ4NjLpOalWZgwmSQSOCg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3f:f2:68:38:59:12:f2:f4:97:da:fd:e2:87:50:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Sep 12 22:01:14 2025 GMT
Not After : Sep 13 22:01:14 2025 GMT
Subject: CN=02282a296c90ad588a789f68f79da62cd8aacd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:d2:03:d4:49:a4:02:1b:8b:02:c6:f7:c9:
43:75:63:24:06:3b:6b:93:6f:62:8e:2d:0d:d7:7e:
54:61:a7:33:6d:bc:3f:48:b3:0e:5e:96:fb:e0:d3:
93:a4:05:c8:b2:d7:16:89:8e:76:61:ad:8e:14:11:
aa:6c:a9:b4:0c:e5:cf:ea:98:60:28:d9:57:41:4a:
cd:de:b7:38:c8:76:51:08:03:42:f0:34:bd:a9:d5:
b4:0c:92:3d:7c:f6:e3:b6:80:32:3b:44:3f:ce:b1:
cf:70:b6:60:4b:6d:78:9a:69:90:f9:05:b9:cc:ec:
a4:c5:a3:34:2d:1d:5f:04:24:56:d9:7d:41:cd:40:
af:ab:ed:ea:c3:76:29:63:2b:cd:52:84:1b:0a:0e:
1e:32:0d:11:6f:52:34:42:d0:ad:72:ec:f3:74:4d:
c7:99:be:03:5c:a1:97:1d:f5:ab:6d:fe:98:91:9d:
7b:aa:2c:5d:ed:c6:c2:31:47:08:2b:11:2d:21:7b:
a1:63:87:3c:ab:22:42:90:34:18:13:30:44:ac:74:
2f:ff:a1:bb:fc:35:6f:18:fd:06:eb:0d:9b:47:11:
15:1d:ee:34:c7:8f:8a:3e:1f:6f:79:62:ca:67:cc:
d1:18:c4:f2:27:bc:aa:46:ab:75:c8:24:b8:78:d3:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:28:2A:29:6C:90:AD:58:8A:78:9F:68:F7:9D:A6:2C:D8:AA:CD:7F
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:31:25:b2:34:4d:28:db:03:59:7a:98:c7:45:dd:e5:67:11:
7f:99:e8:97:77:44:64:a7:b5:7f:a0:8d:99:68:41:36:ac:20:
18:ff:05:5e:7a:a8:f7:05:90:18:89:ad:e8:92:18:a7:2c:58:
22:20:9b:00:0b:d7:42:4d:61:89:2f:d9:54:59:34:41:14:44:
e1:75:6f:0b:41:b3:4a:a9:46:4e:d2:f1:88:66:4f:ba:98:33:
45:03:0b:71:03:fb:be:9e:75:45:90:a7:6a:14:7d:b6:1c:89:
4e:b0:8d:52:54:c3:9f:bb:16:bb:88:7c:73:5f:27:69:ec:26:
82:1d:9f:40:ef:92:d6:5c:11:1d:c1:f2:6c:8b:18:9e:e0:fa:
52:73:e6:48:a4:52:e6:e7:8d:06:16:c4:51:f0:54:d1:c8:f3:
11:7b:9b:05:fe:80:a0:37:3b:fe:09:4a:1a:ba:b5:dc:f1:32:
cb:05:e2:66:a3:87:bb:b3:65:de:d1:67:ad:5b:36:0f:c4:de:
f7:76:54:0a:ae:21:a9:76:7c:c8:be:7a:76:8a:0b:79:29:25:
cc:15:49:47:e0:47:34:08:54:f1:70:3d:f7:5f:2e:65:c7:50:
db:1e:24:a5:ff:a3:bc:c2:a9:c2:ba:16:6f:6d:48:39:ca:fe:
e2:aa:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 06:47:53 2025 by rpki-client